Back to Database
Status published
Medium
CVE-2009-3195
Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content...
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rss.php and (2) search.php.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-3195
Credits & Attribution
No credits recorded in the NVD database.
References
More from jce-tech
View All →CVE-2014-8752
Multiple cross-site scripting (XSS) vulnerabilities in view.php in JCE-Tech PHP...
Medium
4.3
CVE-2010-2461
SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows...
High
7.5
CVE-2010-2460
SQL injection vulnerability in merchant_product_list.php in JCE-Tech Shareasale Script (SASS)...
High
7.5
CVE-2010-0380
install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers...
Medium
5
CVE-2010-0376
Cross-site scripting (XSS) vulnerability in product_list.php in JCE-Tech PHP Calendars,...
Medium
4.3
Affected Vendor
jce-tech
View all reports →Affected Software
auction rss content script
Vulnerable Versions:
3.0
Timeline
Official Publish:
September 15th, 2009
Last Modified:
September 17th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.